The US government just rewrote the rules on federal logging

The US Office of Management and Budget has replaced its M-21-31 logging mandate with M-26-14, shifting federal agencies away from massive data retention toward a risk-based approach focused on specific security outcomes. This new guidance prioritizes real-time threat detection and effective post-incident investigation by emphasizing high-value telemetry over sheer collection volume. To achieve this, organizations should implement intelligent telemetry pipelines to manage data routing and reduce costs without sacrificing the visibility needed for security operations.